[PATCH][WIP] Make exploiting talloc harder by using a random talloc_magic
Andrew Bartlett
abartlet at samba.org
Wed Oct 16 22:09:44 MDT 2013
On Wed, 2013-10-16 at 21:05 -0700, Jeremy Allison wrote:
> On Thu, Oct 17, 2013 at 02:34:14PM +1300, Andrew Bartlett wrote:
> > This patch is inspired by the exploit in
> > http://blog.csnc.ch/wp-content/uploads/2012/07/sambaexploit_v1.0.pdf
>
> That link isn't resolving :-(. Do you have an updated pointer to it ?
It's the first hit for "samba talloc exploit" in Google.
> > What do folks think, and can I get some help to prove it would disrupts
> > these exploits?
>
> Looks a very interesting idea to me, and I really appreciate
> you expressing it in code :-). That certainly helps to understand
> the exact meaning of what you're trying to do.
Thanks!
Andrew Bartlett
--
Andrew Bartlett
http://samba.org/~abartlet/
Authentication Developer, Samba Team http://samba.org
Samba Developer, Catalyst IT http://catalyst.net.nz
More information about the samba-technical
mailing list